
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier: 7fzFjGsraKZCQYTBQsQ3wCAaa1Cp3K/gTjbAmTgerrs=
Subject key identifier: EA:BF:AA:2C:2D:D9:C7:9B:4A:C2:6C:1D:14:DA:5A:81:56:AA:E2:F8
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 05AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number: 059A
Signing time: Wed 20 May 2026 23:16:35 +0000
Manifest this update: Wed 20 May 2026 23:16:35 +0000
Manifest next update: Wed 27 May 2026 23:16:35 +0000
Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: J1uhDBiIJOXfFe5ckEZeCPj+XukrVWhOskjMjtAlloc=)
2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: 5d1XnWQ6pR76M6L2odGawB/ntn61DTd/opa315TiVjw=)
3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: 9NLlN3W75sGcxpsbJYQQO4z8VLfzpHn4F0TnxLk1jJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1451 (0x5ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Validity
Not Before: May 20 23:16:35 2026 GMT
Not After : May 27 23:16:35 2026 GMT
Subject: CN=6a0e40d3-6611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:0e:7d:b3:d2:d8:dd:6a:ab:c8:a0:96:a7:
6f:58:e5:39:35:d0:aa:4c:d0:c7:df:d0:bd:80:94:
da:5d:2d:be:39:40:d3:2d:76:d1:31:1c:80:47:01:
b1:2f:2b:82:1d:12:08:37:72:ae:ea:68:74:57:75:
14:be:41:a0:f8:e2:52:05:1e:80:09:b5:b7:3a:a1:
75:5b:cf:8d:5a:e7:8c:0f:43:10:5e:21:d2:c2:b3:
ea:fa:a6:18:3b:7d:41:9b:80:05:ab:ce:b8:32:c3:
1c:00:74:0d:04:b7:7d:8d:fd:21:b2:02:fd:39:e3:
b4:8b:70:62:e3:5c:ea:05:bf:c6:34:5a:81:6e:62:
4b:c5:39:d8:85:45:b5:37:28:38:15:66:ab:06:c7:
3f:8f:6f:ab:3f:78:7c:23:36:b4:ee:34:1c:74:82:
fe:6f:d3:b0:e2:a9:24:82:cb:73:bf:77:7a:88:4b:
85:9d:41:ff:13:7a:bb:6d:07:4c:84:f6:b8:76:8a:
eb:30:e8:64:c3:5c:d9:3b:80:40:a9:27:aa:fb:3b:
86:fd:cc:47:15:08:a3:54:39:88:2c:3e:4b:6e:93:
6d:97:90:7c:12:0c:8a:55:62:50:35:4f:b8:e7:09:
5d:f9:33:eb:19:69:e0:8f:10:63:2a:8f:79:1b:2b:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BF:AA:2C:2D:D9:C7:9B:4A:C2:6C:1D:14:DA:5A:81:56:AA:E2:F8
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:bb:ab:1e:f3:ca:16:ed:83:2d:bb:f7:d3:b9:15:02:a5:e7:
55:c1:cd:04:eb:b5:c7:f3:1a:7d:a7:1f:32:ee:d1:91:d3:c1:
15:d6:df:b7:70:71:9e:4e:39:00:b7:59:d5:25:d5:d0:c5:76:
b5:a7:74:d1:7c:e8:fb:e3:ef:4e:43:94:f9:9d:78:34:32:58:
97:1e:3f:91:4e:7f:62:15:3d:b9:83:33:9b:32:eb:78:2b:78:
3b:b3:cb:2e:01:aa:79:6b:a6:a4:ac:40:68:c3:17:0a:a6:97:
66:99:42:90:65:e3:2d:45:ff:cc:f2:25:aa:a6:93:1e:c7:08:
95:10:29:20:53:da:5d:03:f2:47:c6:07:cd:52:bb:8b:2e:31:
04:09:a0:8e:16:ee:67:a3:23:12:8a:f0:bb:ac:0d:f2:13:d2:
88:de:37:78:7c:ea:f1:f0:66:34:ed:a7:7a:ba:d9:db:c1:a5:
6c:2e:32:6c:c7:ba:51:62:f0:4e:b2:84:91:46:04:1d:22:ef:
33:ca:9f:1a:90:96:20:13:f6:ee:09:c1:b2:75:f1:f6:2c:55:
bc:ee:e1:d2:f9:23:e7:75:bd:2c:62:ac:48:6f:a0:d0:47:be:
cd:b2:66:1a:67:78:53:8c:ef:c0:96:32:f3:87:6e:63:1d:67:
f2:97:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:37:10 2026 by rpki-client